Prerequisites for DLP Integrator
This topic details the requirements for the virtual machine where you install the Skyhigh Security DLP integrator. It also includes information about network connectivity and the necessary account or roles.
Make sure that the following prerequisites are met before you install the Skyhigh Security DLP Integrator.
- To install the DLP Integrator on Windows, you must have a Windows administrator account and the Skyhigh CASB user roles (Administrator and Policy Management). For details, see About User Roles and Access Levels.
- Only one DLP Integrator can be configured per tenant.
- To use the DLP Integrator for indexing/fingerprinting on Windows, you must also install and configure the latest Microsoft Visual C++ Redistributable.
- The DLP Integrator creates EDM and IDM indexes. For Enhanced EDM (DLP Integrator 6.2.1 and later), the index size limit is 60 GB (in compressed ZIP form). For legacy EDM, the index size limit is 10 GB.
- The host where the DLP integrator is installed must have connectivity to the following AWS S3 endpoints for the IDM and EDM (Enhanced) features to perform as expected.
- For US Production tenants: https://us-west-2-usprod-edm-uploads.s3.us-west-2.amazonaws.com
- For EU Production tenants: https://eu-central-1-euprod-edm-uploads.s3.eu-central-1.amazonaws.com
- The DLP Integrator 6.4.1 and later supports IDM (Enhanced).
Server or Virtual Machine
The following configuration guidelines are based on observations from our most successful deployments. While your configuration is not required to match the suggestions below, they improve performance and provide the best possible experience when using Skyhigh Security DLP integrator.
Operating System
Enterprise DLP Server Integration Mode
Supported Windows Or Unix versions:
- Windows Server 2016
- Windows Server 2019
- Windows Server 2022
- The latest Microsoft Visual C++ Redistributable 64-bit version must be installed to use the DLP Integrator in Enterprise DLP Server Integration Mode on Windows operating systems.
- Linux 64-bit (Ubuntu, CentOS, or RHEL)
- Ubuntu - 19.04 - Disco, 20.04 LTS, 22.04 LTS, 24.04 LTS
- CentOS - 8
- Red Hat Enterprise Linux (RHEL) v7.x, v8.x, v9.x
NOTE: Skyhigh Security DLP Integrator supported current java version is v1.8.0.x.
Document Fingerprint Mode
Supported Windows Or Unix versions:
- Windows Server 2016
- Windows Server 2019
- Windows Server 2022
- The latest Microsoft Visual C++ Redistributable 64-bit version must be installed to use the DLP Integrator in Document Fingerprint Mode on Windows operating systems.
- GLIBC 2.34 (or later) must be installed to use the DLP Integrator in Document Fingerprint Mode on Unix operating systems.
- Linux 64-bit (Ubuntu, CentOS, or RHEL)
- Ubuntu - 22.04 LTS, 24.04 LTS
- CentOS - 9
- Red Hat Enterprise Linux (RHEL) v9.x
Allocated RAM
The Skyhigh Security DLP Integrator dynamically allocates memory for systems (Windows 64-bit and Linux) based on the volume of data to be indexed. It can use up to 70 percent of the available RAM on the host system running the DLP Integrator.
Number of Cores
Minimum 2, though more cores will improve performance.
- Skyhigh Security DLP Integrator spawns multiple threads on different cores to split large files, as Skyhigh Security DLP Integrator is designed to process large files faster.
- By design, one file at a time is picked for processing. So, it is possible to divide a large file across multiple cores, with one thread per core for faster processing.
Supported Files for Fingerprinting
Enhanced Index Document Matching (IDM) Fingerprints
- Each input file is limited to 500 MB, but multiple input files can be indexed together.
- Files less than 64 bytes are ignored.
- Files containing less than 300 characters will only be matched with an exact file match.
- Files containing more than this limit can be matched with an exact file match or a percentage of its content.
Enhanced Exact Data Match (EDM) Fingerprints
- The data source file can be a .csv (comma-separated value) file or .tsv (tab-separated value) file. It isn't possible to escape the delimiter character, so the delimiter character must not appear in the data.
- Automatic fingerprint creation is supported in data source files with up to 6 billion cells, subject to a maximum of 4,294,967,295 (about 4 billion user records) rows and 32 columns.
Network Connectivity
Skyhigh Security DLP Integrator must communicate with the following URLs over TCP 443:
Account and Roles
- Windows Administrator Account. To install the DLP Integrator on Windows, you must have an administrator account.
- Skyhigh CASB User Roles. To install, configure, or modify the DLP Integrator, you must have both the Administrator and Policy Management roles. For details, see About User Roles and Access Levels.